038dcee3d47c71d444193eecafa39c8f9fe2c26ebf558b16edde9483c98fe8b4

Sharing

Copy URL Twitter E-mail

General

Target
038dcee3d47c71d444193eecafa39c8f9fe2c26ebf558b16edde9483c98fe8b4
Size 104KB
Sample240404-wsztjsed8t
SHA256 038dcee3d47c71d444193eecafa39c8f9fe2c26ebf558b16edde9483c98fe8b4
MD5 0ddc67ac86db9fa30202ae62dc0fd239
SHA1 15352747b1c3d4cd8f329626da8238f791b8f6a3
SHA512 603699fc998a6a0db4cdfb512ab3b8ebb728a9f5cd9df6bb1d7ecb2292bc02e782b2dc91e445967a8376971fe5f570f83818f93a568b3aac97a841c5a66fb8bf
SSDEEP 3072:x5zd1poqL6rSJs5M4fnTA3kremwc/gHq/e:Hzd1poq6Ju47A3/fc/A
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
038dcee3d47c71d444193eecafa39c8f9fe2c26ebf558b16edde9483c98fe8b4

File Explorer

038dcee3d47c71d444193eecafa39c8f9fe2c26ebf558b16edde9483c98fe8b4

.exe .ps1 104KB

038dcee3d47c71d444193eecafa39c8f9fe2c26ebf558b16edde9483c98fe8b4

SHA256 038dcee3d47c71d444193eecafa39c8f9fe2c26ebf558b16edde9483c98fe8b4
MD5 0ddc67ac86db9fa30202ae62dc0fd239
SHA1 15352747b1c3d4cd8f329626da8238f791b8f6a3
SHA512 603699fc998a6a0db4cdfb512ab3b8ebb728a9f5cd9df6bb1d7ecb2292bc02e782b2dc91e445967a8376971fe5f570f83818f93a568b3aac97a841c5a66fb8bf
SSDEEP 3072:x5zd1poqL6rSJs5M4fnTA3kremwc/gHq/e:Hzd1poq6Ju47A3/fc/A
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86 polyglot

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

208901

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

51KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

038dcee3d47c71d444193eecafa39c8f9fe2c26ebf558b16edde9483c98fe8b4

generic